[sword-devel] Security problem/Servlet bug

Chris Little chrislit at crosswire.org
Wed Aug 18 07:04:53 MST 2004

It's not exactly a security problem, but we know.  The old server had a 
cron job that went through & deleted empty module downloads every hour 
or day or something.  I'll put it back up once the dust settles on the 
new server.


DM Smith wrote:

> If there is a typo in the modName of a module sent to the servlet:
> http://crosswire.org/sword/servlet/SwordMod.Verify?modName=GerLut&pkgType=raw 
> It will create a zero length file in 
> ftp.crosswire.org/pub/sword/packages/rawzip
> porra.zip is an example.
> Sorry about that, I was testing for some changes to JSword and goofed up 
> the name.
> _______________________________________________
> sword-devel mailing list
> sword-devel at crosswire.org
> http://www.crosswire.org/mailman/listinfo/sword-devel

More information about the sword-devel mailing list